Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2019-16676 Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked … Simple Form 5.0+ Fix from $2,3002019-09-30 MEDIUM 5.3 CVE-2019-16109 An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a dat… Devise 4.7.1+ Fix from $1,6002019-09-08 CRITICAL 9.8 CVE-2019-5421 Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, m… Devise after 4.5.0 Fix from $2,3002019-04-03 MEDIUM 6.8 CVE-2013-0233EPSS 14% Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not proper… Devise No fix yet Fix from $1,6002013-04-25